← Database

CVE-2022-3761

MEDIUM CVSS: 5.9 Published: 2023-10-17 Modified: 2026-06-17

Description

OpenVPN Connect versions before 3.4.0.4506 (macOS) and OpenVPN Connect before 3.4.0.3100 (Windows) allows man-in-the-middle attackers to intercept configuration profile download requests which contains the users credentials

Affected Platforms

Openvpn Connect

Weakness Type

CWE-295, CWE-295

References